*: Microsoft Windows is not supported.
 *: Mixed IPv4/IPv6 pools are not supported.
-*: You must use NO_DNS=TRUE, with all of those ramifications.
-*: Security policies cannot use IP addresses, only hostnames.
+*: Security policies cannot use IP addresses, only hostnames.  (If you use NO_DNS=TRUE, the "hostnames" are actually reformatted IP addresses, and you can match against those.)
 *: You must set NETWORK_INTERFACE to a specific IPv6 address.
 
 {section: Notes}
@@ -21,10 +20,6 @@
 {section: Enabling IPv6}
 
 {code}
-NO_DNS = TRUE
-# NO_DNS requires a default domain name.
-DEFAULT_DOMAIN_NAME = example.com
-
 ENABLE_IPV6 = TRUE
 
 # This should be the IPv6 interface for this computer.
@@ -32,12 +27,14 @@
 NETWORK_INTERFACE = 2607:f388:1086:0:21b:24ff:fedf:b520
 
 # This is the NO_DNS style name for the central manager
-COLLECTOR_HOST = 2607-f388-1086-0-21e-68ff-fe0f-6462.example.com
-# Also acceptable would be
-#COLLECTOR_HOST =[2607:f388:1086:0:21e:68ff:fe0f:6462]
+CONDOR_HOST = cm.example.com
+# Also acceptable would be the collectors IPv6 address, like the following.
+# However, by using the IP address, you can no longer specify your
+# security policy in terms of $(CONDOR_HOST)
+#CONDOR_HOST =[2607:f388:1086:0:21e:68ff:fe0f:6462]
 
 # This is example security configuration for a pool of three hosts.
-ALL_NODES_IN_POOL= 2607-f388-1086-0-21b-24ff-fedf-b520.example.com,2607-f388-1086-0-21e-68ff-fe0f-6462.example.com,2607-f388-1086-0-21e-68ff-fe1e-f9e.example.com
+ALL_NODES_IN_POOL= *.example.com
 ALLOW_WRITE = $(ALL_NODES_IN_POOL)
 ALLOW_READ = $(ALL_NODES_IN_POOL)
 ALLOW_ADMINISTRATOR = $(COLLECTOR_HOST)